CVE-2026-53279: drm/gma500/oaktrail_lvds: fix hang on init failure

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-26 · updated 2026-07-08

Description

In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2c_get_adapter() and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling does not separate these cases so on a late init failure it will try to deregister and free also an adapter that had previously been registered. Since i2c_get_adapter() takes another reference to the adapter, deregistration hangs indefinitely while waiting for the reference to be released. Fix this by only destroying adapters allocated during LVDS init on errors.

Affected products

Linux kernel: from 6.0 before 6.1.175; from 6.2 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10; 7.1-rc1, 7.1-rc2, 7.1-rc3 — fixed in 6.1.175, 6.12.91, 6.18.33, 6.6.141, 7.0.10

How to fix

Upgrade to a fixed version: Linux kernel 6.1.175, 6.12.91, 6.18.33, 6.6.141. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-53279 or the next vulnerability affects your stack